Lucene search
+L

2012 matches found

CVE
CVE
added 2023/03/27 12:00 a.m.78 views

CVE-2023-25875

CVE-2023-25875 affects Adobe Substance 3D Stager, specifically versions 2.0.0 and earlier. The issue is an out-of-bounds read in OBJ file parsing that can disclose memory contents and potentially bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file)....

5.5CVSS5AI score0.00325EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/27 12:00 a.m.9 views

CVE-2023-25867 Adobe Substance 3D Stager PCX File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/27 12:00 a.m.35 views

CVE-2023-25872 Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/03/27 12:00 a.m.11 views

CVE-2023-25863 Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

7.8CVSS6.9AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/27 12:00 a.m.38 views

CVE-2023-25863 Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.14 views

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00332EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.12 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00396EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.17 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00396EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00332EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00379EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory when processing USDC files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malware file or a specially created...

7.8CVSS8AI score0.00332EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.12 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.22 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00412EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.9 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00291EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.00291EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

5.5CVSS5.8AI score0.00325EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00332EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.20 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

7.8CVSS7.3AI score0.00332EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

5.5CVSS5.7AI score0.00313EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder